Ransomware Solutions Consulting Experts

Progent's Ransomware Settlement Negotiation Consulting in Albany
Progent is experienced in negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complex activity that calls for a combination of field experience, IT skills and business savvy. It also calls for close co-operation with the ransomware victim's IT staff and the insurance provider, if there is one. Since the number one goal of the ransomware target is fast recovery, it is vital to establish response groups that operate effectively, concurrently, and with intimate collaboration. Progent has the scope of technical skills and the depth of experts to complement your network support team and recover your network environment rapidly and economically.

Support available from Progent's ransomware negotiation team include:

• Establishing the type of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Testing the threat actor's decryption capabilities
• Deciding on an acceptable settlement payment with the ransomware victim and the insurance provider
• Establishing a settlement amount and timeline with the hacker
• Verifying accordance with anti-money laundering sanctions
• Overseeing the crypto-currency transfer to the hacker
• Receiving, reviewing, and operating the hacker's decryptor tool
• If necessary, contacting the threat actor for technical help with the decryption tool

• Quarantining affected endpoints to arrest the spread of the attack
• Creating digital copies of each breached server and endpoint and data store to allow forensics in parallel with recovery
• Adding anti-virus agents to all virus-free endpoints
• Salvaging files from air-gapped backups or uncompromised endpoints
• Building a clean environment
• Mapping and reconnecting datastores to reflect exactly their pre-attack state

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current strains of ransomware like Ryuk, Maze, Netwalker, and Nephilim often try to exfiltrate information. Hackers are then able to require an extra ransom in exchange for not posting this data or selling it. Sadly, there exists no way to prove that exfiltrated data have been totally erased by the hacker. In fact, in numerous instances the hacker has little control over who can access the stolen files. Paying an exfiltration ransom does not free you from the need for seeking the advice of privacy lawyers, performing an inventory of data were taken, and sending the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided remote and onsite network services throughout the U.S. for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes professionals who have been awarded high-level certifications in core technologies including Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial and ERP software. This breadth of expertise allows Progent to identify and consolidate the surviving parts of your information system following a ransomware assault and reconstruct them rapidly into a viable system. Progent has worked with top cyber insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Albany
To get in touch with Progent about crypto-ransomware settlement guidance in Albany, phone Progent at 800-462-8800 or go to Contact Progent.